NULL Dereference Vulnerability in Linux Kernel Display Driver by AMD

CVE-2026-53313

What is CVE-2026-53313?

A vulnerability in AMD's Linux kernel display driver could lead to application crashes due to a NULL dereference in dc_dmub_srv error paths. Specifically, functions dc_dmub_srv_log_diagnostic_data() and dc_dmub_srv_enable_dpia_trace() were not adequately checking for null pointers before attempting to log errors. The fix involves separating the checks for the dc_dmub_srv pointer, ensuring that a valid check is in place before proceeding to log operations, thereby preventing potential crashes.

References